[Snyk] Fix for 1 vulnerabilities

[pavelbe4solutions]

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix 1 vulnerabilities in the rubygems dependencies of this project.

Snyk changed the following file(s):

• Gemfile

⚠️ Warning

``` Failed to update the Gemfile.lock, please update manually before merging. ```

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Denial of Service (DoS) SNYK-RUBY-REXML-7462086	551

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Denial of Service (DoS)

[dryrunsecurity]

DryRun Security Summary

The provided code change updates the versions of several Ruby gems, including CocoaPods, ActiveSupport, Fastlane, and xcpretty, to include bug fixes and security patches, and it is recommended to review the release notes and changelogs of the updated gems and have a comprehensive security testing plan to identify and address any potential security issues in the application.

Expand for full summary

Summary:

The provided code change updates the versions of several Ruby gems used in the project, including CocoaPods, ActiveSupport, Fastlane, and xcpretty. These updates are likely to include bug fixes and security patches, which is a good practice to keep the project dependencies up-to-date. From an application security perspective, the changes do not directly introduce any security vulnerabilities. However, it's important to review the release notes and changelogs of the updated gems to ensure there are no known security vulnerabilities that could impact the project. Additionally, it's recommended to have a comprehensive security testing plan, including static code analysis, dynamic testing, and penetration testing, to identify and address any potential security issues in the application.

Files Changed:

• Gemfile: The file has been updated to use the latest compatible versions of the following gems:
  • cocoapods: Updated from ~> 1.13 to ~> 1.14, >= 1.14.0.
  • activesupport: Updated to use a minimum version of >= 6.1.7.3 and a maximum version of < 7.1.0.
  • fastlane: Updated to use a minimum version of ~> 2, >= 2.220.0.
  • xcpretty: The version constraint remains the same, ~> 0.

Code Analysis

We ran 9 analyzers against 1 file and 1 analyzer had findings. 8 analyzers had no findings.

Analyzer	Findings
Sensitive Files Analyzer	1 finding

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.

[kodem-security]

Kodem Security Scan ✅

All good, no new security risks were found for this PR

---

No CVEs were fixed in this PR